Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,144 total in npm · sorted newest first- Jun 20, 2022
Malware in azure-arm-oep-samples-js-beta
1 compromised version
- Jun 20, 2022
Malware in azure-arm-mixedreality-samples-js
1 compromised version
- Jun 20, 2022
Malicious code in azure-arm-recoveryservicesbackup-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-recoveryservicesbackup-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-postgresql-flexible-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-mariadb-samples-ts (npm)
- Jun 20, 2022
Malware in azure-arm-mariadb-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-recoveryservicesbackup-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-recoveryservicesbackup-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-postgresql-flexible-samples-js
1 compromised version
- Jun 20, 2022
Malicious code in azure-arm-redisenterprisecache-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-powerbidedicated-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-peering-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-migrate-samples-ts (npm)
- Jun 20, 2022
Malware in azure-arm-peering-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-powerbidedicated-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-redisenterprisecache-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-migrate-samples-ts
1 compromised version
- Jun 20, 2022
Malicious code in sample-helpers-device-twin-service (npm)
- Jun 20, 2022
Malicious code in iothub-buildtools (npm)
- Jun 20, 2022
Malicious code in azure-arm-redisenterprisecache-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-netapp-samples-ts (npm)
- Jun 20, 2022
Malware in azure-arm-netapp-samples-ts
1 compromised version
- Jun 20, 2022
Malware in iothub-buildtools
1 compromised version
- Jun 20, 2022
Malware in azure-arm-redisenterprisecache-samples-ts
1 compromised version
- Jun 20, 2022
Malware in sample-helpers-device-twin-service
1 compromised version
- Jun 20, 2022
Malicious code in stressfault (npm)
- Jun 20, 2022
Malicious code in mean_time_recovery (npm)
- Jun 20, 2022
Malicious code in iot-device-samples (npm)
- Jun 20, 2022
Malicious code in azure-dtdl-parser-samples-js-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-iothub-samples-ts (npm)
- Jun 20, 2022
Malware in iot-device-samples
1 compromised version
- Jun 20, 2022
Malware in mean_time_recovery
1 compromised version
- Jun 20, 2022
Malware in azure-arm-iothub-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-dtdl-parser-samples-js-beta
1 compromised version
- Jun 20, 2022
Malware in stressfault
1 compromised version
- Jun 20, 2022
Malicious code in setup-kubectl-action (npm)
- Jun 20, 2022
Malicious code in azure-arm-dnsresolver-samples-ts-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-dnsresolver-samples-js-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-datafactory-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-datafactory-samples (npm)
- Jun 20, 2022
Malware in azure-arm-dnsresolver-samples-js-beta
1 compromised version
- Jun 20, 2022
Malware in azure-arm-datafactory-samples-ts
1 compromised version
- Jun 20, 2022
Malware in setup-kubectl-action
1 compromised version
- Jun 20, 2022
Malware in azure-arm-datafactory-samples
1 compromised version
- Jun 20, 2022
Malware in azure-arm-dnsresolver-samples-ts-beta
1 compromised version
- Jun 20, 2022
Malicious code in azure-functions-ux-build (npm)
- Jun 20, 2022
Malicious code in azure-arm-containerservice-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-containerservice-samples (npm)
- Jun 20, 2022
Malware in azure-functions-ux-build
1 compromised version
Page 4917 of 4,963